Red Hat Security Advisory

RHSA-2026:1606

OpenJDK 25.0.2 Security Update for Windows Builds

Released 2026-02-02 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-17645 CVE-2026-21945 · GHSA-r2mr-x4h2-9chr

MEDIUM 41

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00992 Published 2026-01-20 Partial fix CWE-400

TI-2026-17632 CVE-2026-21932 · GHSA-qc7q-3c5c-f8mv

LOW 33

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00525 Published 2026-01-20 Partial fix

TI-2026-17633 CVE-2026-21933 · GHSA-5rm3-299f-6m9v

LOW 27

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00299 Published 2026-01-20 Partial fix

TI-2026-17625 CVE-2026-21925 · GHSA-jhg6-g5fp-536p

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00254 Published 2026-01-20 Partial fix